
FIG. IB 



535140_1 



Entity 1 who wants to compute a 
function f on an input g transmits f 
and g to entity 2. 



Entity 2 outsources the work of 
computing f on input g to one or 
more entities 3 thru n. 
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Entities 3 thru n perform work as 
instructed and return replies X| thru 
_2 to entity 2, where repUes are 
POWs. 
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Entity 2 verifies repHes Xj thru 
_2 and uses replies to achieve 
security goals. 
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Entity 2 also compiles replies into a 

response x, where response x is a 
POW, and thus, uses computations in 
replies to convince entity 1 to accept 
response x. 
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Entity 2 transmits response x to entity 1. 
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Entity 1 verifies response x. 
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Entity 1 uses computations in 
response x to achieve a security goal 
and to aid in the completion of 
computing function f on input g. 
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Entity 1 transmits hash function h to entity 2. 



Entity 1 transmits g to entity 2, where g is an instruction to look 
within a predefined search space for "k" /-bit pre-images that 
hash to a range "y" of /-bit images whose t least significant bits 

have a value s 



Entity 2 transmits hash fimction h to entities 3 thru n. 
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Entity 2 subdivides input g into gj thru g^^.j, where each 
subdivision defines a different portion of the search space in 
which to look for valid images. 



Entity 2 transmits g| thru g^_2 to entities 3 thru n, respectively. 



Entities 3 thru n perform work as instructed and return replies Xj 
thru _2, respectively, to entity 2, where replies are POWs. 



Entity 2 verifies replies Xj thru x^^ .2 uses replies to achieve 

security goals. 



Entity 2 compiles replies into a response x, where response x is a 
POW, and thus, uses computations in replies to convince entity 1 
to accept response x. 
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Entity 2 transmits response x to entity 1 . 



Entity 1 verifies response x. 
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Entity 1 uses computations in response x to achieve a security 
goal and to aid in minting coins 
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FIG. 3 
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Entity 1 rarlBomly selects secret value r and calcula 
h(r II i) to derive yj for i=l to k. 
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Entity 1 transmits hash function h to entity 2. 
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Entity 1 instructs entity 2 to find, for each y^, a 
pre-image such that the "t" least significant bits 
of h(Xj||y^) are equal to s. 



I 



Entity 2 transmits hash function h to entities 3 thru n. 
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Entity 2 transmits all the pairs (i, y|) together with pair (s, 
t) to entities 3 thru n and instructs them to find pre-images 
such that the t least significant bits of image h(Xj||yi) are 

equal to s. 



Entities 3 thru n perform work as instructed and transmit 
replies Xj to entity 2, where replies are POWs. 



Entity 2 verifies replies x- and uses replies to achieve 
security goals. 



Entity 2 compiles replies into a response x, where 
response x is a POW, and thus, uses replies to convince 
entity 1 to accept response x. 



Entity 2 transmits response x to entity 1 . 
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Entity 1 verifies the response x and uses response x to 
accomplish both a security goal and a minting operation. 
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FIG. 4 



